Understand the work and set up your practice
Know what you are protecting, why it matters, and where you can safely learn.
What you’ll learn
- Confidentiality, integrity, and availability
- Assets, threats, vulnerabilities, and risk
- Security operations, application security, and governance
- Practice scope and evidence handling
Learn with these resources
Web Security Academy: getting started ↗
Read the introduction to the training environment; you will return to its labs in stage 6.
External resources remain with their creators; access and availability may change. Resource links reviewed 2026-10-09.
Put it into practice
Choose a fictional small online shop. List five assets, a plausible threat to each, and one preventive or detective control. Create a learning notebook. Use your own isolated environment or the training labs linked here, and record the permitted scope before testing.
Keep this as evidenceA one-page asset and risk map, plus a notebook with a section for each stage.
Before you move on
Check these after doing the work and explaining it in your own words.
Record what you tried, what you learned, and what to revisit. Keep credentials and private data out of these notes.
0 / 6000 characters · Stored in this browser
Practice explaining your decisions
Related questions open in the question bank. Their review progress is tracked separately.